$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: 1nKffYMDJCaI+TH+z6kh1FftjspAqV7KJ7Rwk65XVJs= Subject key identifier: 18:C3:FA:D4:4B:B5:E0:8D:5B:6C:D9:F3:D4:39:89:2F:4C:D9:94:B0 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 72F4B1E5B77A22D3C35ABBEB1462928319AEED7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 03D5 Signing time: Sat 18 Oct 2025 04:50:06 +0000 Manifest this update: Sat 18 Oct 2025 04:45:06 +0000 Manifest next update: Tue 21 Oct 2025 14:14:06 +0000 Files and hashes: 1: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: nB5GuVBx1EXQ0aif9OdtS/ee5ltqbldDBZgjB4VAvbE=) 2: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f4:b1:e5:b7:7a:22:d3:c3:5a:bb:eb:14:62:92:83:19:ae:ed:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Oct 18 04:45:06 2025 GMT Not After : Oct 21 14:14:06 2025 GMT Subject: CN=18C3FAD44BB5E08D5B6CD9F3D439892F4CD994B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e5:a3:fc:7f:5f:88:92:3e:9b:1f:c3:5b:a5: d7:20:e2:e8:ac:c3:eb:b3:5f:05:db:7f:fa:00:a9: d7:f8:fa:c9:3a:5a:d8:32:8c:28:9d:eb:34:c6:78: 4d:d5:17:dd:b8:6e:a6:9e:3b:81:84:4e:79:9f:c1: 84:8e:7a:97:b8:58:71:1c:31:6a:39:a1:06:d4:07: 38:58:b7:18:06:c9:d9:43:04:55:ef:dc:c3:c7:b4: 76:72:c6:86:68:e8:6a:83:0a:67:60:2a:38:ec:fe: ea:50:4a:f2:9a:39:6c:63:6c:82:64:8f:03:62:fc: 82:f6:bc:b5:a9:f8:55:b4:c6:46:f5:47:39:bb:44: 14:b4:02:c8:01:59:4d:a1:a1:e3:63:a6:47:64:e1: a5:26:52:3e:a9:a4:05:8b:af:ee:c4:58:04:44:45: c3:79:b1:2b:6e:13:92:21:44:c1:5d:7d:7a:8e:66: 61:82:b3:9c:08:19:1c:d1:3c:3c:d2:e1:9b:f0:89: eb:22:c3:cf:a0:77:eb:bb:58:f5:3e:40:35:aa:a6: 75:a5:27:59:ba:2b:09:bb:d4:a6:c7:ec:ac:fa:8d: 98:72:a0:30:53:dc:a1:ad:d4:5e:6e:e9:43:0c:7d: cc:83:6a:43:fa:69:fc:41:31:b5:39:de:9b:92:e6: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C3:FA:D4:4B:B5:E0:8D:5B:6C:D9:F3:D4:39:89:2F:4C:D9:94:B0 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c3:12:e8:0f:59:67:a5:ed:9e:51:b4:a2:bb:06:8c:d1:67: 9a:1f:ea:e1:91:8d:5c:82:fe:28:d8:12:70:7a:f6:18:22:99: 6c:18:57:f8:cd:2c:42:df:c8:f5:88:53:02:55:16:de:b5:b9: 3e:32:14:ed:57:68:1a:53:f2:df:a5:16:a7:4b:53:8c:4e:91: 71:19:18:9a:9e:97:74:50:c8:86:c5:ef:9f:7d:e8:ef:ae:23: aa:52:3b:6c:1c:74:26:7a:76:eb:c0:b9:be:0b:c7:aa:a7:d8: 5b:f7:b0:1e:d2:e3:b8:3b:6c:7d:1a:3a:0e:fb:3e:db:9b:b4: 85:4c:9e:19:5c:0f:f8:db:22:4e:64:fd:32:5a:09:ad:2d:b1: cd:b0:e0:c0:20:11:f3:32:00:da:6f:ea:4c:c4:d1:40:0e:95: 8c:73:1d:21:43:56:46:32:08:0c:48:50:51:6d:37:0a:86:67: a5:00:26:d3:73:ee:b8:da:37:bc:2f:b6:f4:73:0f:e9:7d:0d: 13:a0:1b:0c:6b:8d:08:38:3b:05:74:71:d0:2d:21:6f:94:bc: 0b:e0:af:59:3c:56:02:da:a7:f1:44:73:c4:b4:64:3a:e4:36: 2b:80:27:8c:88:3d:1e:17:e7:ea:65:d2:71:b7:9d:51:06:a1: 9a:a1:72:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvSx5bd6ItPDWrvrFGKSgxmu7XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTEwMTgwNDQ1MDZaFw0yNTEwMjExNDE0MDZaMDMxMTAvBgNV BAMTKDE4QzNGQUQ0NEJCNUUwOEQ1QjZDRDlGM0Q0Mzk4OTJGNENEOTk0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5aP8f1+Ikj6bH8Nbpdcg4uis w+uzXwXbf/oAqdf4+sk6WtgyjCid6zTGeE3VF924bqaeO4GETnmfwYSOepe4WHEc MWo5oQbUBzhYtxgGydlDBFXv3MPHtHZyxoZo6GqDCmdgKjjs/upQSvKaOWxjbIJk jwNi/IL2vLWp+FW0xkb1Rzm7RBS0AsgBWU2hoeNjpkdk4aUmUj6ppAWLr+7EWARE RcN5sStuE5IhRMFdfXqOZmGCs5wIGRzRPDzS4Zvwiesiw8+gd+u7WPU+QDWqpnWl J1m6Kwm71KbH7Kz6jZhyoDBT3KGt1F5u6UMMfcyDakP6afxBMbU53puS5pmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMP61Eu14I1bbNnz1DmJL0zZlLAwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrDEugPWWel7Z5RtKK7BozRZ5of6uGRjVyC /ijYEnB69hgimWwYV/jNLELfyPWIUwJVFt61uT4yFO1XaBpT8t+lFqdLU4xOkXEZ GJqel3RQyIbF75996O+uI6pSO2wcdCZ6duvAub4Lx6qn2Fv3sB7S47g7bH0aOg77 PtubtIVMnhlcD/jbIk5k/TJaCa0tsc2w4MAgEfMyANpv6kzE0UAOlYxzHSFDVkYy CAxIUFFtNwqGZ6UAJtNz7rjaN7wvtvRzD+l9DROgGwxrjQg4OwV0cdAtIW+UvAvg r1k8VgLap/FEc8S0ZDrkNiuAJ4yIPR4X5+pl0nG3nVEGoZqhcvI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:01 2025 by rpki-client